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ABSTRACT 



Petri nets are presented as a tecnnique for representing 
computer systems having asynchronous, concurrent operations. 
Tne structure of tne nets are analyzed as a means of 
demonstrating the correctness of the modeled system. The 
execution of the petri net is considered as a stochastic 
process, allowing analysis of tne model as a queueing 
network system by transforming tne petri net into its 
stocnastic equivalent net. It is shown tnat product form 
solutions for the state probabilities exist for the class of 
state machine decomposable nets but not for tne more general 
class of consistent petri nets. Solutions for the 
corresponding open systems are derived by extending tne 
petri net model to include arbitrary sources and sinirs. 
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I. INTRODUCTION 



Witn tne explosion in numbers and types of computer 
hardware components witnessed in tne past few years, 
computer system design nas become an extremely complex tasfc. 
Cot has observed [lj : 

"Today's computers are among the most complex man made 
systems in existence today. The development of such 
systems represents a significant commitment of physical 
and mental resources. This cost can only be justified if 
these computing devices serve their intended purpose 
the efficient processing of data in response to specific 
needs. " 

If we are to mate effective use of these development 
resources, it is necessary to provide the system designer 
with tools which allow him or her to create and analyze 
sophisticated system designs. 

Several trends have emerged which have accelerated the 
search for new and better design tools. The low cost of LSI 
and VLSI hardware components coupled with technological 
advances in digital communications nas led to the evolution 
of a wide variety of multiprocessor systems, distributed 
computing applications, and computer networks. As early as 
1976, Anderson and Jenson [2j identified 27 different 
networfcing schemes being used in prototype or actual 
systems. When one considers the number of communication 
protocols and transmission media which have been proposed or 
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implemented, tne number of variables Involved in tne 
nariware design process becomes truly awesome. 

Likewise, innovations in system software nave given rise 

to such concepts as distributed operating systems, on-line 

data bases, and interactive programming, to name a few. 

Kobayashi and Konneim [3J nave noted tnat: 

"With the increasing complexity and sophistication of 
computer communication systems, modeling and performance 
evaluation [emphasis their'sj are becoming critical 
rssues in the design and operation of such systems. It 
is apparent tnat for a cost-effective design we must be 
equipped with systematic methods of predicting 
quantitative relations between system resource 
parameters, system workloads, and measures of system 
performance ." 

Several characteristics of these systems may be 
identified which determine what types of models are 
appropriate for performance evaluation, A central concept is 
that of concurrent or parallel processing. Each node in a 
network, or processor in a multiprocessing system, is 
capable of independent computation. At the same time, system 
or global resources such as memory and communication links 
must be shared by the various processing elements. This 
results in enforced cooperation between otherwise 
independent processes. 

Since most resources in computing systems tend to be 
scarce in relation to the demands on tnem, contention exists 
between resource users which must be arbitrated. This 
problem is complicated by the observation that demands in 
computer systems are not constant. For example, in computer 
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communication networks empirical evidence snows that demands 
tend to he bursty and sporadic. As a result, resource 
demands must be viewed as stochastic in nature and system 
models must be capable of expressing the probabilistic 
elements of the modeled system. 

The uncertainty in resource demand results in two 
phenomena which must be considered in performance modeline. 
Tne first is tne creation of queues of users which require 
service but must wait for resource availability. The second, 
and interrelated, phenomenon is the delay which users 
experience while waiting for resources and wnile being 
served. The field of queueing theory has attempted to answer 
tnese questions and others concerning tne probabilistic 
properties of systems in both analytic and simulation 
models . 

One purpose of performance prediction modeling is to 
analyze system designs in terms of performance measures or 
indices. Ferrari [4j has identified three performance index 
classes: productivity, responsiveness, and utilization. A 
number of specific measurements may be computed from the 
model to express tnese indices — throughput, waiting time, 
and utilization for example. 

A second purpose of performance modeling is to verify 
proper system operation. It is important to ensure that tne 
underlying system is deadloc£-free, or at least to predict 
the circumstances under which deadlock could occur. In 
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addition, it may be necessary to demonstrate that the system 
enforces synchronization or mutual exclusion among elements 
of the system. 

It is not sufficient for a model to be capable of 
providing answers to these questions. The model must also be 
amenable to validation? that is, the determination of now 
accurately the predicted results conform to the modeled 
system. This may be particularly difficult to accomplish 
when the actual system does not exist or is otherwise not 
available. Finally, it is desirable that the model be robust 
in order that its domain of validity extend over as large a 
range of systems as possible. 

Performance models can be divided into two separate 
types — simulation and analytical. A simulation may take 
various forms? however, the form most often associated with 
performance modeling is computer based, discrete event 
simulation. This model consists of a program which describes 
the state of the modeled system in terms of system entities 
and their attributes at each point in time. Attributes are 
varied as a result of the instantaneous occurrence of events 
in the system. The model then tracks the changes in 
attributes over time to determine the required performance 
measures. Simulations suffer from several shortcomings. To 
accurately model the system, the programs must be complex 
resulting in a significant software engineering problem? the 
model must be carefully designed and verified to ensure 
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proper operation. Because of tne probabilistic nature of tne 
system, it is necessary to operate the simulation for 
numerous runs and over a large span of simuation time to 
ensure statistically meaningful results. This can lead to 
significant computing costs for the simulation. Finally, if 
tne system parameters are to be changed, or elements of the 
system altered, it is necessary to change the simulation and 
rerun it. Once again, tne costs of software modification and 
model operation must he met. This can maJce it difficult to 
generalize or abstract from the simulation. 

An alternative to simulation modeling is analytic 
modeling. In this method the system is expressed as a set of 
mathematical equations. Determining the performance measures 
for the system amounts to finding the appropriate solutions 
to the system equations. Unfortunately, in many cases the 
solutions are mathematically intractable or computationally 
inefficient and require that simplifying assumptions be made 
about the system. However, to quote from Sobayashi and 
Konheim once again: 

"Even when a decision is made for simulation, an 
analytic solution, however crude it may be, can serve as 
a guideline in narrowing down a range of system 
configurations and parameters under wnich a simulation 
runs. It also could save a considerable amount of 
modeling efforts, by detecting possible errors 
introduced in the design and implementation phases of a 
simulation ." 

This thesis investigates an approach to the analytic 
modeling of computer systems based on using a 
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graph-tneoreti c technique — petri nets — as a 
representation for system elements and their Interactions. 
By analyzing the structure of a petri net model, it is 
possible to answer a number of questions regarding the 

operation of tae modeled system. We snow that it is possible 
to model tae stocaastic nature of computer systems by 
extending the petri net model to allow nondeterminism in the 
net to be expressed in terms of probability distributions. 
It is then possible to consider a petri net as an analog to 
a queueing network system and therefore it is possible to 
apply the known methods of Markov analysis to tae nets to 
obtain analytic solutions for the system. The problem we 
address in tnis thesis is tae evaluation of nondeterminlstl c 
and stochastic petri nets using queueing theory techniques. 
Tne solutions wnich result combine tae structural properties 
of petri nets with the capability for performance 
prediction. 



A. PETRI NETS AS A PERFORMANCE MODEL 

Consider a simple computer system consisting of two 
cooperating, concurrent processes A and B running on 
separate hardware. Process A is a producer, and process B is 
a consumer of data. It is desired that a handshake protocol 
be implemented between the two processes (see Figure 1.1). 
How might this be represented? 
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Fieure 1.1 Communicating Processes 



One possibility is to list the events which must occur 
during tne handshake process. Using this event list, we 
could then determine what conditions must be satisfied for 
each event to occur, and vnat changes in the system result 
from that occurrence. This could be graphically displayed in 
the following manner. Let the events be represented by a 
bar, and tne conditions by circles. For eacn event, draw a 
directed arc from each circle (condition) which must hold 
for tne event to occur to the bar (event). Next, draw a 
directed arc from the bar to each circle (condition) wnich 
holds as a result of the occurrence of the event. Finally, 
determine the initial state of tne system by deciding whicn 
conditions initially hold, and place a dot (token) in a 
circle for each nolding of that condition. Tne resulting 
graph is shown in Figure 1.2. 

This graph is called the petri net model of the 
communication protocol, after C. A. Petri who first studied 
them in tne 1950's [5]. Note that each event may have one or 
more input conditions, and one or more output conditions. In 
the language of petri nets, the events are called 
transitions and the conditions are called places . The net 
operates by moving tokens around the net in accordance with 
the firing rule, which states that an event may occur when 
each input place to tne event nas a token .assigned to it. 
The transition fires by removing a token from each input 
place and depositing one in eacn output place. The state of 
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Figure 1.2 



Petri net model of a communication protocol 
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each place is determined by the number of tokens in it. The 
system state, or marking, is then represented by a vectcr 
whose elements are the state of each place in the net. 

One feature of the petri net model is that the tokens 
can represent either control flow or data flow; tne 
difference purely lies in how the net is interpreted by the 
designer. Tnis nas led to some difficulty in modeling 
data-dependent events. Several attempts have been made to 
overcome this problem by extending the definition to include 
specialized places such as conditional places, which cause 
transitions to fire in different ways depending on whether 
or not the condition place holds a token. In either case tne 
token content of the conditional place is not changed by the 
firing. An example of this extension is tne Macro E-Net Noe 
and Nutt have proposed [6]. In a slightly different 
extension, inhibitor places were added to the net [7J which 
prevent firine of a transition when the place nolds a token. 

A second feature of petri nets is that the firine of 
transitions is inherently asynchronous and concurrent — for 
example in Figure 1.2 the <process data> events for both 
processes can fire independently of each other. When 
necessary, the operation of concurrent processes can be 
coordinated through the use of multiple input places; the 
<receive message> event is an example of this type of 
interaction. 
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Tfte basic petri net, as depicted Here, does not attempt 
to model tne time required for execution. Extensions to the 
theory which account for execution times were investigated 
by Ramcbandani [8] and others. This technique allows for 
analysis of the time-related operation of the net. 

1. Analysis of petri nets 

Petri nets may be analyzed in a number of ways. Much 
of the wort, particularly at MIT, has been based on using 
techniques from automata theory and investigating the nets 
as formal language generators [9, 10J . Using this method, 
Hact has proven a number of decidability questions about the 
possible configurations (system states) of the net. Other 
worlc [11,12,13] has emphasized the graph theoretical 
properties of the nets in analyzing their structure. This 
methodology has led to tne identification of several 
subclasses of petri nets based on special structural 
cnaracteri sties . 

Simulations Dased on petri net models have been widely 
used in analyzing nardware designs of concurrent systems and 
data flow computing. Typically, the system to be modeled is 
reduced to its petri net equivalent which then serves as 
input to the simulator. The simulator then executes tne 
petri net in much the same manner as a conventional discrete 
event simulation. 
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2. Pses and Limitations of the Petri Net Approach 

Petri nets nave been used to model a large number of 
concurrent software and hardware systems. In hardware 
design,, they nave been used as a basis for developing speed 
Independent logic [14,15] by provine the conditions for 
which circuits are free of races when operating in 
fundamental mode. More ambitious applications have involved 
the analysis of multiprocessor systems such as the CDC 6600 
[16,17], IBM 350/91 [18], Amdahl 470 7/6 [17] , and US Navy 
SEAFIRE weapons system [19]. Most of these applications have 
involved simulation modeling due to tne complexity of the 
designs. A slightly different approach to hardware design 
has been the design by step-wise refinement method. Yalette 
[20] nas shown that single transitions could be replaced by 
more complex structures when certain conditions were met. 
Using this method, each component of the system can be 
separately analyzed and formed into an independent structure 
he called a well-formed blocfc. By substituting these blocics 
for transitions in tne net, it is possible to retain the 
properties of the original net. This hierarchical structure 
also simplifies tne problem of understanding tne operation 
of the net. Figure 1.3 shows how this might be accomplished. 

Petri net models have been used in the analysis of 
software designs as well. For example, they nave been used 
to verify tne correctness of communication protocols [21] . 
Operating system synchronization primatives sucn as P and V 
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[22] may be modeled using simple net structures. Figure 1.4 
gives an example of bow mutual exclusion could be 
represented. Tbe contents of place S is the semaphore value 
for the protected resource (in this case 1). Each process 
wnich requires exclusive use of tne resource nas an event 
P(S) which may fire only if the semaphore is non-zero. 
Firing of tne corresponding V ( S ) event returns tne tofcen to 
the semaphore. The significant advantage of using a petri 
net is that mutual exclusion can be proven by showing that 
only one P(S) event can be fired until the corresponding 
7 (S ) event occurs . 

Lest the reader get the impression that petri nets are 
the ultimate modeling tool, it should be noted that petri 
nets have limitations in their modeling ability. Tne lacfc of 
a mechanism for handling data dependent events as described 
earlier has made it difficult to model actual systems using 
deterministic nets. A second related limitation is the use 
of deterministic transition firing times in the analysis of 
timed nets. In our opinion, the restriction of petri nets to 
deterministic modeling has been responsible for the lacls of 
attention given to them in recent years. 

Our view of petri nets emphasises the non-deterministic 
modeling capabilities of the nets. We consider the 
transitions in the net to be service centers which operate 
according to some service time distribution. In this 
approach, the places can represent queues of tokens awaiting 
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Figure 1. 
Di jlcstra's 
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Petri net modeling 
P and 7 (from Peterson 



of mutual exclusion using 
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service. By regarding nets in tnis manner, tne fcnown results 
of queueing network tneory may be applied to tne analysis 
while maintaining the benefits of tne underlying structure 
of the nets. We feel tnat this will result in a better 
modeling tool for analyzing concurrent systems. 

B. REVIEW OF RELATED WORK 

The basis for concurrent system modeling has largely 
been derived fron two papers by Karp and Miller [24,25J . 
These papers proposed several models for concurrent systems. 
Computation graphs are simular to petri nets except that 
places were modeled as directed arcs between events and 
labeled with a four-tuple defined as: 

A — tne initial number of words in a FIFO queue 
U — the number of words added to the queue as a result 
of tne firing of tne input transition 

W — the number of words removed from the queue as a 
result of the firing of the output transition 

T — a threshold number of words (perhaps greater than 
W) required for the output transition to fire. 

Karp and Miller established the requirements for several 
Important concepts including liveness and boundedness wnicn 
we discuss in greater detail later. 

Reiter [26J extended computation graphs by adding a 
fifth element tau to the directed arc labeling which 
represented tne execution time required for the output 
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transition to process tne W data words wnen firing. Reiter 
tnen determined a metnod for finding possible sequences of 
firings of transitions. For cyclic grapns, ne found a lower 
bound for tne cycle period of tne grapn. Computation grapns 
nave been used in the performance analysis of data flow 
processors [27] . 

The second paper by Karp and Miller [25] investigated 
parallel program schemata and vector addition systems. A 
parallel program scnema modeled parallelism in programs by 
establishing computation states and rules for state 
transitions. Tne concept of FORK and JOIN which nave been 
applied to data flow and other MI MD architectures was 
developed to express the creation of concurrent processes 
from a sequential process, and the combination of concurrent 
processes into a sequential process. The equivalence of 
petri nets, computation grapns, and parallel program 
schemata was shown by Miller [23] . 

Most of the research on petri nets in tne United States 
has been conducted at MIT. Commoner and Holt [ll,12j studied 
a deterministic subclass of petri nets Known as marlced 
graphs and proved several tneorems regarding tneir system 
state spaces. A more general subclass of deterministic nets, 
persistent nets, was studied by landweber and Robertson [13] 
who proved that the theorems regarding marked graphs were 
applicable to this class. A final deterministic subclass 
referred to as state machine decomposable was investigated 
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by Ranch and ani . In addition, Ramchanianl analyzed this 
subclass with deterministic transition firing times to 
derive expressions for the minimum net cycle period in a 
manner analogous to that Reiter used for computation grapns. 

Other classes of petri nets have been defined which 
improve the tractability of tne problem of finding solutions 
to performance measures while retaining characteristics 
which are desired in the modeled systems. In particular, 
live, bounded, conservative, and consistent nets nave 
received the most attention. The properties of these classes 
will be examined in detail in the next section. 

Our work extends this previous wort by focusing on the 
broader class of nondeterministic, consistent petri nets 
which appears to be the most general class for which 
solutions to performance questions may be found. While 
nondeterminism increases the difficulty of dealing with 
petri nets analytically, much of the previous work on petri 
net structure remains pertinent to this class. 
Nondeterminism allows the net to represent different types 
of data, for example, by regarding the data type or 
transition firing time as a random variable. To analyze the 
performance of nondeterministic petri nets, we consider tnem 
as analoes to queueing network models. The basis for 
analysis of these models is the classic worn of Jackson [29] 
for the case of open systems, and Gordon and Newell [30] for 
closed systems. Both of these models relied upon poisson 
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arrival processes, first come, first serve (FCFS) queueing 
discipline, and exponential service departure processes to 
ensure tnat tne Markov property was met and allowed the 
system state probabilities to be expressed as the product of 
tne marginal state probabilities. Tnis quality is known as 
the product form solution and is required for 
computationally efficient solutions. Most of the recent work 
in queuing network theory nas attempted to find product form 
solutions for more general systems. Jackson [31] considered 
systems wnere the arrival rates and service rates were 
functions of the queue lengths (states) at the various 
nodes. Bassett et al. [32J extended this to open and closed 
networks where customers were of different classes and tne 
queueing discipline was FCFS, no queueing, and last come, 
first serve with preemptive resume (LCFS-PR). All these 
cases were shown to have product form solutions. In 
addition, they showed that a condition known as local 
balance was a necessary condition for product form 
solutions . 

Chandy et al. [33J considered the question of local 
balance in more detail and developed the more general notion 
of station balance which was also shown to be necessary and 
sufficient for product form solutions if non-exponential 
differentiable service distributions were used. In addition 
they proved that arbitrary service distributions satisfied 
station balance if processor sharing (PS) or LCFS-FR 
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disciplines were used. In tne case of exponential service 
time distributions for all service classes, they showed that 
FCFS and priority disciplines resulted in station balance 
being met. This result has been extended to any wortc 
conserving discipline. 

In summary, it has been shown that product form 
solutions exist for queueing networks with tne following 
properties : 

1. For exponential service, any worfc conserving queueing 
discipline may be used. 

2. For PS and LCFS-PR disciplines, any differentiable 
service distribution may be used. 

3. The solutions do not depend on the routing used for 
the customers. 

C. OUTLINE OF SUCCEEDING SECTIONS 

In Section II, we present the formal definitions of 
petri nets and derive several useful properties. The state 
space — the set of system states the net may occupy — is 
determined by constructing the reachability set of the petri 
net. The conditions under which the state space is finite 
and recurrent are then considered. It is shown that nets 
with certain structural characteristics give rise to tnese 
restricted state spaces. In particular, the classes of 
marked graphs, state machines, and consistent nets are 
considered because of their relation to realizable systems. 
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In Section III we turn to nets witn timed events. Tne 
case of deterministic routine and transition time is first 
considered. Next, tne (probabilistic) class of state 
machines with nondeterminis tic routine and exponential 
transition times is examined. It is shown that for the class 
of state machine decomposable nets it is possible to 
transform the net into a stochastic equivalent net which is 
analogous to a closed queueing network. For this class of 
nets a product form solution for the state probabilities is 
derived . 

Next, petri nets which allow external sinlrs and sources 
are defined. Again, it is snown that tne stocnastic 
equivalent nets may be analyzed as queueing networks; in 
this case an open system. 

Finally, the class of consistent petri nets with 
exponential firing times is considered and it is shown that 
product form does not exist for this class of nets. 
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II. PETRI NET THEORY 



In this section the relevant petri net theory is 
presented. Much of the wors follows that of Commoner and 
Holt [11]* Kraft and Miller [25], and Ramchandanl [6]. The 
notation used is primarily tnat of Peterson [23 J . 

The petri net was defined informally in the preceding 
section as a means for representing related events and their 
conditions in systems. We now formalize this notion by 
defining the petri net N and its directed graph 

representation. 

Definition 2.1 N = <P,T,I,0> 
where 

P = (p t - i p^ is a place in tne net} 

T = {t; ! t; is a {T fl^iti on in the net} 

I : ( P ^ T ) — >JnJ sucn tnat if p t is an input place 

to tj f I(p t *,t j) 2: 1 and 0 otherwise 
0 : (P^T) — >N sucn tnat if p^ is an output place 
to tj f 0(p ( - ,t j) 1 and 0 otherwise 

with the requirement that € T 3 P/ , P* € p i 

I(p;,t t -) / 0 A0(p^tj / 0 and VPj € p 

I(p/ , V ) > 0 ==> 0(pj ,t L ) = 0 

We furtner define tne following sets: 

•t; = tp j ! I(p ; - t*i) > 0) 
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U * = (Pj I 0(pj ,ic) > 0) wnere £ T /\ Py € P 

and likewise: 

*Pj = (t£ i 0(pj ,i L ) > 0} 

Pj» = lt t - ! I(pj ,t t -) > 0} where t A - € T A Pj € P 

These sets are referred to as the input and output sets, 

respectively. Note that the definitions of the functions I 
and 0 require that: 

Vh € T, *t t * /= (p A t£» A *t 4 * (Jt 4 # = <p 

The set of places represents tne conditions in our informal 
model, and the set of transitions represents the events. The 
input and output functions specify the preconditions for an 
event to occur and the results of the event occurrence. 

Corresponding to each petri net we define a bipartite, 
directed graph as follows: 

Vp; Pj € P draw a circle representin'? a place 
Vti t £ €T draw a vertical bar representing a transition 
Vti ,py if Pj € # t 4 draw a directed arc from p j to 

Vt 4 * ,Pj if p y^ti* draw a directed arc from t^ to p j 

Me will use the notions of petri net and petri net fjraph 
interchangibly (since they are equivalent). 

Example 1. 

Consider tne following petri net N = <P,T,I,0> with 
P = { P, . P 2 . P 3 ♦ P* t P y . P* . P 7 ) 



T = { t, , tj£ , t^ , , tjy } 




Then I and 0 may be 
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represented 07 tne n X m incidence matrices: 



1 


1 


0 


0 


0 




0 


0 


0 


0 


0 


0 


1 


0 


0 


0 




0 


0 


1 


0 


0 


0 


0 


1 


1 


0 


Cq - 


0 


0 


0 


0 


1 


0 


0 


0 


0 


0 
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where C-£ c,j 


- I ( P £ » t j ) 


and C 0 £ , j 


11 

O 

r*. 

* 

of 
« 



The corresponding petri net graph is shown in Figure 2.1. 

If we associate with each place in a petri net N a 

non-negative integer marking function jll , we have the 

following definition of a marked petri net M: 

Definition 2.2 A marked petri net M = <P»T, 1 , 0 , JLL> 
where P,T,I ,0 are defined as before and 
fX: P — >N 

Each function jUL^ defines a marking of the net. In graph 

notation the petri net graph is extended to a marked petri 

net graph by adding tokens to places as follows: 

Vp 4 ' € p * JJL K (p t ) = n then place n tokens (dots) on 
place p t * . 

Figure 2.2 shows a possible marking for the petri net of 
Example 1 . Clearly a (countably) infinite number of possible 
markings exist for any petri net. This marking represents 
the (possibly multiple) holdings of conditions at 
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Figure 2.1. Petri net grapft 
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X 




Figure 2.2. Marsed Petri net grapn 
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some instant of execution ana may be viewed as a description 
of tfte state of tne net. 

Definition 2.3 A transition t is enabled iff 
VPj Pj 6 *t i ==> J-L(py) I ( p j . t £ ) 

For eacn marking jj, k we can define tne enabling set S K as 
follows : 

Definition 2.4 Tne enabling set S r C T = {t£ i t^ is 
enabled by marking ju^} . 

In our grapn notation, a transition is enabled if eacn arc 
directed into the transition has a token in its originating 
place. Referring to Figure 2.2, it will be seen that t,, t z , 
and are enabled and therefore = {t, , t^, t„, J* 

Transition t^ is not enabled since there is no token in 
place pg. corresponding to tne arc p^ — > t^. 

An enabled transition may fire to create a new marking. 
That is, we define a function: 

Definition 2.5 A firing function for a marked net M is 
F :jlu X s — > /X sucn tnat F(|X k ( Pj ) 1 1 ^-) = - 

I ( Pj * t t ) + 0 ( P j 1 1 4 ) = 
where Pj € P A t^^S^. 

F is defined for all markings for wnicn tne set S K is 
non-empty. Continuing with the vector notation introduced 
earlier for tne functions I and 0 , we may denote eacn 
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martini as an n-element vector 0* where n = | pj and 

0 K (i) = (Pi) for 1 = 1,2,... ,n . Tnen F may be expressed 

as : 

F(U K ,t t ') = Ok, - + i wnere C j L and C 0 t are tne 1th 

columns of the input and output incidence matrices 
respectively. 



Definition 2.6 tfarting JUL^ is directly reachable fromjuifclf 
(V <=S K ) A F((X„t; ) -(X, and is denoted as: 

Returning to our earlier example, transition t 2 may be fired 
(recall that tne enabling set S fe = {t ( , t 2 , t^ > ). Ey 

inspection of Figure 2.2, we specify the vector for marking 

' 2 
1 
1 
0 
0 
0 
0 



= 



Tne resulting marxing fJL K ., = 



0 , 



7»i 



- Ok. ~ 0^ 2 + 0 $ 2 ,- 
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0 




0 
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0 
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0 




0 




0 
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0 




0 




0 




0 



In graph notation, one toKen is removed from eacn place 
having an arc directed into the firing transition, and one 
toten is added to each place having an arc directed from the 
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Figure 2.3. Petri net grapfi after firing transition t2 
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firing transition. The resulting marking is shown in Figure 

2.3. 

Next we consider sequences of transition firings. Assume 
the following firings exist for some marired net M: 
fX c =>/X, 

Then we denote 

. V CT 

M*a = ^M*J l^z 

where the firing sequence Q*is some sequence of transition 
firings (tj » tg, . . . t t n ) . 

Definition 2.7 Marking is reachable, from marlring if f 

3 (J* 

where U 5 ( t ^ ,tg,...,t /1 ) 

If we form the reflexive, transitive closure of the 
transition firing relation we nave tne following definition: 

Definition 2.8 (liven a marfced net M, the reachability set 
Q (M ) is defined inductively as: 
basis: /X a € Q 

induction: /J. fc € OA 3v € T ! |UL k =>ja K , ( ==> ^ 0 

We are interested in determining the elements of the set 
Q(M). To do so, we must first formalize the previously 
introduced vector notation as a vector addition system. 
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A. VECTOR ADDITION SYSTEMS 

The concept of vector addition systems was first 
explored by Karp and Miller [25J . This section is largely 
derived from their wort. 

A vector addition system is defined as a pair V = (d,W) 
where d is an r-dimensional vector with and V is a 

finite set of r-dimensional vectors v, , w 2 , .... with 
Vj(i)£I. The reacnability set R(V) for a vector addition 
system is the set of vectors composed by adding elements of 
the set V to d. That is 

R(V) = {i | i = d + (w, + w z + ... + w n f A x ( i )i2L2 }. 
In addition, the following terminology is used: 

The relation .fs is defined as 
x <[ y <=> for i = 1,2, ...,r x(l) y(i) 

The symbol CJ is defined such that if n is any integer, 

GJ > a and n + CJ =GJ. 

The reachability set R(V) can be determined by constructing 
the corresponding reachability tree T(7). Nodes in the tree 
consist of r-dimensional vectors x,y,z,... with 
x(i)€N LX CJ). for i = 1,2, ...,r . The relation < is defined 
as x «< y <=> a directed path exists from x to y in T(V). Let 
d be the root of the tree. Descendants are constructed 
recursively as follows: 

1. If x K y and x = y, y is a leaf node. 

2. Otherwise, construct successor nodes to y with 

vectors y + w ( , y + w a , ... , y + w^ where for i = 
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1.2, ...,r y(i) + wj(i).>0. In addition, if tnere exists 
a node z such that z <*< y and z.<y + w{ and z ( J ) < 

y(j) + V((j) for some j, tnen y(j) + w,;(J) =Cj. 

To illustrate the construction of this tree consider the 
following example from [25] : 

Example 2. 

Let V = (d,W) wnere 
d = [1,0, 0,0,0] 

V = { [-l,l,0,0,0j , [-1,0, 0,1,0] , [0,-1 ,2 , 0 , 0j , 
[0,1, -1,0,0] , [0,0, 0,-1, 2] , [0,0,0, 1,-1] > 
Tne resulting reachability tree is shown in Figure 2.4. 

The following theorems from [25J allow us to answer 
decidability questions about vector addition systems by 
inspecting tne reachability tree. 

Theorem 2.1 

V*3y ! y €r(?)A U^*y) <=> z ! z € t(v) f\ (x < z) 

The proof, while straight foward, is rather lengthy and so 
is not included here, but may be found in [25]. 

Theorem 2.2 For any vector addition system V, T ( V ) is 
f ini te. 

We first show the following two lemmas: 
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Figure 2.4. 



Reachability tree for Example 2. 
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Lemma 2.2.1 



Let p, ,p t ,p s , ....p n , ... be an Infinite sequence of 
elements of (J\f (Jlui ) . Then there exists an infinite 
subsequence such t n a t 

Vtk^ P^^LPcS-* • •• P z *£- • • • 

Proof. Construct an infinite subsequence by selecting 
elements with first entries nondecreasing. From tnis 
sequence, construct an infinite subsequence with second 
entries nondecreasing, and so on. 

Lemma 2.2.2 (K'dnig Infinity Lemma) Let T be a tree such 
that each vertex has a finite number of successors and 
there exists no infinite directed path from the root. 
Then T is finite. 

Proof. Since each vertex nas a finite number of 
successors, let n be the maximum number of successors 
for any node. Then mere are at most n paths of length 1 
from the root, and if p is some node in the tree, there 
are at most n paths of length 1 in the subtree having p 
as its root. Since no infinite path exists by 
assumption, let m be tne maximum path length. Then the 
maximum number of nodes is n m and T is finite. 

Proof of theorem 2.2. 

Assume there exists an infinite directed path from the 
root of T(F) with node sequence p ( ,p a ,p 3 , . . . ,p n , . . . 
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Tnen by lemma 2.2.1, tnere exists a subsequence 
p* * * P t * • • • » Pj » ••• vi th p t < . • . p^<j„ • • • • By 

definition, if p« = then p b is a leaf node and 
therefore the inequality is strict and 

p^ <Pi <Pc***<P 2 <••• . Again by definition, since 

P* Pi, must have one more entry equal to GJ than p^. 

Since the number of entries is finite, this is 

impossible and tnerefore no such infinite directed patn 
exists. By lemma 2.2.2, T ( V ) is finite. 

Using these theorems, it is possible to prove the following 
decidability theorems about the reachability set R(V): 

Theorem 2.3 Given some finite n£j\| , 

Vi x € R(V) A (x(i)^ n) is decidable. 

Proof. Construct T(V). By theorem 2.2 T(V) is finite. 
Therefore Vy y € T( V ) f\{ y( i )S n) is decidable. By theorem 
2.1 then, the question is decidable for R(V). 

Theorem 2.4 Given some subset of tne entries for tne 
r- dimensional vector addition system {1 ,2, ... r} , 

Vx x6isf r 3y y € R(0 A (Vi i € 0) . 

y(i) f-Ix(i) is decidable. 

Proof. By the definition of T(V), this property holds iff 
there exists a leaf node z such that Vi i£0 z(i) = GJ • 
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Theorem 2.5 Given a vector addition system R(V), it is 
decidable wnetner R ( V ) is finite. 

This result follows directly from theorem 2.4. 

Theorem 2.5 Given two vector addition systems V and V', 
R(V)£=.R(V') is unlecida ble. 

Rabin's proof for this result appears in BaKer L34J . 

It should be noted tnat the general reacnability problem 
i.e., given x^jvj^is i^R(V), is not determined by the 
reachability tree. However, an algorithm for solving the 
reachability problem has been found [35J . Therefore, the 
reachability problem is decidable (although the 
computational complexity is not fcnown) . 

This completes our study of vector addition systems. We 
next demonstrate the correspondence between vector addition 
systems and marJced petri nets. Let M = <P,T,I,0,p> be an 
arbitrary marked petri net. The corresponding vector 
addition system V(d,W) may then be constructed in the 
following manner: 

let the dimension r = JpJ 

let d =jLL, wherejLL 0 is an initial marsing for M 
let W = {w K | t; € T,pj € P w R ( J ) = 0(pj ,t t « ) - I(p; , t ( ' ) } 
Note that Jwj = | tJ and that elements of ¥ reflect tne net 
change in marfcing resulting from the firing of a transition 
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in M. Tnis leads to tne following theorem relating the 
reachability sets of M and 7: 

Theorem 2.7 O(M) = R(7) 

Proof. i). Q(M).2 r( 7). Let x€R(M). Then 

t. t, e, i. 

fJL a =>fJL,=>fJ. z => . . .=>x . By definition of v K , 

=jLL+ w* and substitutine for t, , t a , t 3 , .... 
t n in the firing sequence f jL+ w, + w^ + . ..w n = x 
Since fJL t = 1 by definition, x£ R(7) . 

ii). Q(M)S=R(7). Let x 6R(7). Then 

x = d + v, + ♦ . . . w n .By the same reasoning as case 

t, c. t- 

1 f • • • = / X • 

Using theorem 2.7 and the results for vector addition 
systems we state the following: 

Theorem 2.B Siven a marked petri net M witn initial 
marfcingju^ » it is decidable if the reachability set Q(M) 
is finite. 

Theorem 2.9 Siven a marked petri net M with initial 
marking fj^ , it is decidable if there exists k£j\J, such 
that for all elements of the reachability set Q(M), 
each entry jJi( i )% k. 

Definition 2.9 A marked petri net M is k-bounded iff 
3k 'VjLL jUl€Q(M) ==>^(i)Sk . 
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Fieure 2.5. Reachability tree ior Example 1. 
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Definition 2.10 A. marked petri net M is safe iff it is 



k-bounded with k = l . 

We complete this section by once again considering Example 
1. Define tne corresponding vector addition system: 

V = (d,V) with d = [2 t l ,1 ,0,0,0 ,0] as indicated by 

Figure 2.2. 

V = { [-1,0,0,1,0,0,0J , [~1 , ~1 , 0 , 1 , 1 , 0 ,0J , 

[0,1, -1,0, -1,1,0] , [0,0, -1,0, 0,0,1] , 

[0,0, 1,0,0, 0,-1] } 

Next, construct the corresponding reachability tree T(V). 
The tree is shown in Figure 2.5. By inspection, the 
reachability set R(V) is determined to be: 

{ [2, 1,1, 0,0, 0,0] , [1,1, 1,1, 0,0,0] , [1,0, 1,1, 1,0,0] , 

[2, 1,0, 0,0, 0,1] , [0,1, 1,2, 0,0,0] , [0,0, 1,2, 1,0,0] , 

[1,1, 0,1, 0,0,1] , [1,1, 0,1, 0,1,0] , [1,0, 0,1, 1,0,1] , 

[0,1, 0,2, 0,0,1] , [0,0, 0,2, 1,0,1] , [0,1, 0,2, 0,1,0] , 

[0,0, 0,2, 1,1,0] } 

This (finite) set is also Q ( M ) and therefore M is K-bounded 
with S = 2. 

B. SUBCLASSES OF MARKED PETRI NETS 

The nets investigated in the preceding parts of this 
section are more properly referred to as generalized petri 
nets. Analysis of generalized nets nas proved to be somewhat 
intractable. As a result, several properties of petri nets 
have been studied which define subclasses of the generalized 
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Figure 2.6 Nondeterminis tic net — botn tl and t2 are enabled. 
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nets. Tnese restrictions appear to be Justified in tbat many 
(if not most) actual systems may be modeled by the 
restricted nets. 

Definition 2.11 A transition t T is live for marfcingjLL„ 
iff 

==>3c r\ m.2>/x At,- € s K 

where S ^ is the enabling set toTfj. < . 

If a transition is live, a firing sequence may always be 
found which will allow it to be fired indefinitely often. 

Definition 2.12 A marfced petri net M is live iff 
Vt t£T ==> t is live for marking JJL* 

In systems, liveness is often associated with the problem of 
deadlock. Eacfc [36] has shown that liveness is equivalent to 
the reachability problem; therefore, it is decidable. 

Definition 2.13 A place p t - € P is conflict free iff 

VjLLx • • • » € P i* A t <* 6 S K ==> 

3^/ J ^ i A 

For any marking, a conflict free place may not enable more 
than one transition. In Figure 2.6, place p, is not conflict 
free since both t, and t 2 are enabled. 

Definition 2.14 A petri net M is conflict free iff 
Vp p €? ==> p is conflict free. 
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A stronger statement concerning places is the following: 

Definition 2.15 A place p is decision free iff 

i*Pu[ = |Pt-| * 1 • 

Definition 2.15 A marked petri net M is a marked graph iff 
Vp P ==> p is decision free. 

A final property of petri nets may be defined: 

Definition 2.1? A marking |Xr I s persistent iff 

V/x t€s A (j ==> tss,, V t€<j. 

A persistent marking is one in which an enabled transition 
remains enabled until it is fired. 

Definition 2.18 A petri net M is persistent iff 
Vt t €T ==> t is persistent for fj.* . 

The question of persistence is important in the analysis of 
petri nets and therefore we present a decidability theorem 
for these nets: 

Theorem 2.13 Given a ^-bounded, marked petri net M, it is 
decidable wnetner M is persistent. 

Proof. Since M is lc-bounded, its reachability set Q(M) is 

finite. For each /X K 6 0 construct the enabling set S*. 

t; 

Tor eacn t t * € S K determine S k4( where ]X K =>jU. ki| . If S kM 
^=-S K - {t 4 -} , M is persistent. 
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Note that all conflict free nets (and tnerefore all marted 
graphs) are persistent, 'tfe next consider some aspects of the 
petri net classes naving these properties. 

1. Marked Graphs 

Marted grapns nave been extensively studied by 
Commoner and Holt, among others [11,12]. Here we present 
some pertinent results of tneir wortc. 

Recall from graph theory the following three 
definitions: 

Definition 2.19 Let D = <A,R> be a digraph with nodes a 
and b. A .directed patn from a to b is a finite sequence 

of nodes P = (c„ ,c , , . . . »c„) such that c a = a, c^ = b, 
and for all c ( - with a.SLl'SLn c { -Rc t4 . ( . If a = b, P is a 
directed circuit . 

Definition 2.20 A digraph D = <A,R> is strongly connected 
if for every two nodes a,b£A, tnere is a directed path 
from a to b and b to a. If there is an undirected path 
from a to b, D is connected . 

Definition 2.21 A component of a digraph D is a connected 
subdigrapn of D which is not a proper subdigraph of any 
connected subdigrapn of D. 

The constraint on the input and output transitions to a 
place manes it possible to replace every place with a single 
directed arc between its input and output transitions. In 
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this way the petri net reduces to a digraph simplifying 
analysis. The marlced graph may then be more simply defined 
as : 



.Definition 2.22 A marked graph m' = <T',E',/J.'> is a 
three-tuple where 



T' - T 

E ' : TXT — > (0,1) 
where E ( t , t j ) = 
fjf : E' — >J\f where 



1 




if 3p 0(p,t •) 
A i ( p , t j) = 1 

otherwise 



1 



e t j > * 

where e tj *€B A * {t t >A P*,* = {tj> 

(Here we have synonymously defined the edge set 
E' = {e<*j‘} where tne edge directed from node i to 



node j e<-/6E' iff B'(t it tj) = 1 



Additionally define tne token count N as: 



Definition 2.23 The token count of a graph is a function 
N : P — > Jsf where 

if P E then N(P) =2u.(e -) for e ( -£P 

C.»l ' 

Figure 2.7 shows the graphical representation of a marlced 
graph where the number of tokens on an edge e t j corresponds 
to p/(e t 'j). The following theorems and proofs appeared in 
[11J : 
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Marsed <?raph. Note that tokens are placed on the arcs 



Theorem 2.11 A marking fj, ' is live iff the toXen count 
N > 0 for every directed circuit in M. 

Proof, i). Assume fJ»' is live and N ( B ) = 0 for some 

directed circuit B and eij is an edge in tnat circuit. 

By definition, a sequence O' exists which enables tj . 
After firing ) = 1 and therefore N (B ) =1 in 

contradiction with the assumption. 

ii). Assume N(B) > 0 and tj is a node in directed 

circuit B. If t j is enabled, tj is live. Otnerwise let 

t t - be a node in B such that e^j is in B. If tj is 

enabled, fire it resulting in tj being enabled. If not, 

continue to bachtrach. Since the path length of B must 
be finite in the directed circuit beginning and ending 
with tj , this procedure must halt and therefore tj is 
live. 

This leads immediately to a corollary: 

Corollary 2.11.1 A marfcing which is live remains live 
after firing. 

Theorem 2.12 A live marking is safe iff every edge in the 

graph is in a directed circuit with toxen count 

N(P) = 1. 

Proof. Clearly, tne toicen count of any directed circuit is 
constant. If N ( P ) = 1 then, the edges of the directed 
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by tne same 



circuit must be safe. If N(P) K > 1 , 

process as in tneorem 2.11 transitions la the circuit 
may be fired until 1c tokens appear on tne same edge. 

Theorem 2.13 For every finite, strongly connected grapn G 
there exists a live and safe marking for the 
corresponding mariced grapn M ' . 

Proof. By definition, each edsre in G must lie in a 
directed circuit. Since G is finite, a finite number of 
directed circuits exist. Therefore construct f-L' by 
placing one tolcen arbitrarily on each directed circuit. 
The conditions of theorems 2.11 and 2.12 are met and M ' 
is live and safe. 

2. State Machine Decomposable Nets. 

This class of petri nets has been studied by 
Ramcnandani [9] . A state machine is defined as: 

Definition 2.24 A marSed petri net M is a state machine 
iff 

Vt t€T A [I(p 4 * »t) > 0 ] A [I(Pj*t) > 0 J ==> p < = Py 
Vt t€T A[o(p 4 -,t) > 0] A [0 ( p j , t ) > 0J ==> Vt - P; 

That is, Vt I *t| =|t*j = 1. 

This restriction results in nets which are functional 
equivalents of finite state machines, hence the name state 
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machine. Note teat state machines allow conflict i.e., 
nondetermini sm . 

Definition 2.25 A subnet M,; is a strongly connected 
component of M. 

Definition 2.25 A petri net M is state macnine 
decomposable iff 

} ! U P t - =P A Cfy =T A M is a state macnine. 
Several properties of state macnines may easily be snown. 

Theorem 2.14 The token count N(M) is constant for a marked 
state machine. 



Proof. 


Assume 


N(M) = C and 


t;€T. 


By definition 


K| - 


M- 1 


. Let {p, } = 


•tj and 


{p*> = t £ * with 


N(p, ) 


= c, and 


N(p^) = c„ . If 


t t - does 


not fire, tne 


token 


count 


of p, and p a are unaffected by t t *. If 1 1 


does 


fire, by 


definition N(p, ) 


c , - l and 


N(p<j) = c^+ 1 . 



Summing we have: 

^N(p) =c, -l+c*+l = c, + c 2 

and the token count does not change . 

Corrolary 2.14.1 Every marked state machine is bounded. 

Proof. Since the toicen count N(M) is constant, the maiimum 
number of tokens at any place is N(M); therefore M is 
bounded . 
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3. Consistent Petri Nets. 



An additional class of petrl nets are tnose for 
which there exist consistent current assignments. 

Definition 2.27 k petri net M is consistent iff there 
exists a function <£ : T — > I such that 

1. Vt;£? <$(t«; ) = 

2. Vp€P £ <&x I(p,t.) = Ecpx 0(p,tj) 

c*i j«i J 

where in the summation n = flj . 

The function c|> is analogous to an electromagnetic flux and 
the (pi's are referred to as the currents associated with 
transitions t t -. Note that part 2 of tne definition is an 
expression of Kirlchoff's Law. Part 2 requires solving tne 
following set of linear equations: 
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where and C q are the incidence matrices for M. 
If a non-zero solution exists, M is consistent. 



Siample 3. Consider the net in Figure 2.9. 



Construct Cj. 
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Figure 2.8 Consistent Petri net 
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<P**<P* = <£, 



c p>*<pr s <P, 

<Pr 2 0*r < 5 > 3 = 0+ = 1 



Therefore M is consistent. 
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Tne significance of consistency Is that a consistent system 
will cycle — given an initial marfclng fji ot there exists a 

a* 

firing sequence sucn tnatjUL. =>/-L, An inconsistent system 
will either consume totcens and nalt or produce totens and 

become unbounded. Tnese results are summarized in two 

theorems by Ramchandani [8], 

Theorem 2.15 A petri net M is consistent iff 

_ ( 7 

ju^Cr such that fJL 0 =>}Ji a is a cycle. 

Proof, i). Let 0 (t Pe the consistent currents of 

the transitions of M. Let JLL^Pj) = 0 + 0 + 0 =C where 

(p r . . (p* correspond to t t ’ . . . t„£p t -« . Then let 
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CT= {t ( ,t a ...} wnere the multiplicity of lnCTis 

equal to Its current giving fX 9 =>}J.- . Since the sum of 

tne currents Into and out of a place is 0, 

jLL # (p t ') =|ULj(pi) and fJLj . Therefore (Jis a cycle, 

x CT 

il). Let JU. =>M«. be a cycle. Then /U.J p c ) =>fJL 0 ( p t ' ) . Let 

*,»*«♦•••♦** be the multiplicity of transitions 

t, ,t 2 i.. .,t 4 £«p t and 1, , 1 ^ t . . . » 1 A be the multiplicity of 

* * 

transitions t, ,t a , . . . ,t„ep - . Zt; = Zl; . Then let 

<$(tj ) = 5; if tj£*p t ' andC^(tj) = 1; if t;6P t * • This is 
a consistent current assignment and therefore M is 
consi stent . 

Theorem 2.16 A petri net M with a live, bounded marxine 
is consi stent . 

Proof. Since M is bounded, its reachability /?raph Q(M) is 
finite. Since M is live, there exists a strongly 
connected subgraph which contains jj. . Therefore, there 
exists a directed circuit in the subgraph firing all 
transitions. This is a cycle and therefore M is 
consistent . 

We conclude our description of petri net subclasses by 
considering the hierarchical relationships between classes. 
In the sections on marfced graphs and state machines, it has 
been shown tnat both are contained within tne class of 
bounded petri nets. It is easy to show that the containment 
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Fisure 2.9 Bounded Petri net 
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Figure 2.10 Unbounded, non-live, consistent net 
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Consistent 




Figure 2.11 Petri net Hierarchy 
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Is proper. Figure 2.9 snows a net wnlcn is bounded but 
neither a marked graph nor a state machine. The intersection 
of the class of marited grapns and state machines are a 
degenerate class we call sequential processes. Theorem 2.16 
showed that all live, hounded marited nets are consistent. 
Once again, tne containment is proper — Figure 2.10 is an 
example of an unbounded non-live net which is consistent. 
Finally note tnat all persistent or conflict free nets are 
deterministic and therefore may be reduced to decision free 
nets i.e., marted graphs. These relationships are summarized 

in Figure 2.11. 
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III. STOCHASTIC PETRI NETS 



To tnis point we have analyzed petri nets on the basis 
of tnelp structural characteristics. To utilize petri nets 
for computing performance measures, it is necessary to 
introduce the concepts of time and nonieterminism to the 
Dasic model. We turn first to the question of modeling time 
in petri nets. 



A. TIMED EVENTS IN PETRI NETS 

An important concept in Section II was the marking, or 
system state, of the net. The marlring gives an instantaneous 
description of the tohen content of each place in the net. 
The marlring was changed as a result of tne firing of a 
transition. We defined a firing sequence as an allowable 
ordering of transition firings in accordance with the rules 
for enabling transitions. By controlline the dynamics of the 
transition firing process, it is possible to analyze the 
cnanges in system state as a function of time. 

Several authors have addressed the question of adding 
timing considerations to petri nets. Two different 
interpretations have resulted from this worK. Sifahis [37J 
has proposed that once enabled, transitions fire 
instantaneously. A delay is then introduced before tohens 
are available at the output places for possible enablings cf 
other transitions. An alternative view is that taicen by 
Ramchandani [9} and Zuberet [38], In their models, once 
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enabled, transitions fire after a delay called tne firing 
time. After the firing time is completed, the net cnanges 
state by moving the appropriate toicens. These two 
interpretations appear to be equivalent. We cnoose to use 
the latter interpretation to conform to the usual notion of 
a queueing service center. 

We first consider the case where transition firings 
occur at discrete time epochs 'Tj,'T 2 , • • • ,1^, , • • • where T 0 is 
the instant of the nth firing. 

Definition 3.1 The system state of a martced petrl net M is 
a function: 

U :T — > fX 

where = { 'fj t'I'gt • • • » i; * » • • } * 

u(-r 0 ) =jui 0 , 

and U(r n ) -p.*. ==> 3 10(1;.,) =JUUj A|LLj2>jLL fc 

U is a step function with discontinuities at tnose instants 
of time in which the system changes state. 

Definition 3.2 Tne firing time X of a petri net is a 
function : 

X : T — >R* 

where € T X(t f > ) = T t * = x 

By this definition, i£ is the time required for a firing of 
the transition t£. 
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By specifying tne firing tine function X, it is possible 
to describe U(^). In this section we consider the case where 
tne transition firing times X£ are constant for all 
transitions. This restriction mattes it possible to describe 
a total ordering of transition firings for persistent nets. 
In tne case of allowed conflict between transitions, it is 
necessary to impose a priority scheme on transition firings 
to resolve tne conflict (that is, to mate tne firing 
deterministic). This ordering amounts to a restriction on 
tne firing sequences wnlcn are allowed. Those sequences CT 
for which the ordering holds are termined feasible firing 
schedules. Ramchandani has shown that for timed marked 
graphs and live, safe, and persistent petri nets a periodic 
feasible firing schedule exists. He additionally derived an 
upper bound on the computation rate (cycle period) for state 
machine decomposable nets. The bound is given by: 
pmax = nin[p jf p z ,£) n \ 



where p^ is the cycle time for each circuit in tne 
corresponding net and is given by: 




N(Ct) 

n 

J*i * 




where N(C^) is tae token count for circuit C^, xj is tae 
sum of the firing times for the transitions in C t ' , and (pils 
the current associated with that circuit in a minimal 
current assignment. Ramchandani also argues that this 
formula can serve as a first order approximation where tae 
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mean firing times IQ are substituted for tne deterministic 
firing time x^ in tne formula. A slightly different 
derivation of tne same result was made by Ramamoortny and Ho 
[ 39 ] . 



B. MARKOV ANALYSIS OF PETRI NETS 

Researcn into tne behavior of timed petrl nets to date 
nas concentrated on deterministic nets with constant firing 
times. As noted in Section I, this approacn fails to account 
for tne randomness and uncertainty wnicn cnaracterize actual 
systems. We propose that nondeterminism be modeled 
probabilistically in tne net. Our metnod differs from 
previous woric by emphasizing the stochastic nature of the 
system state (marking). In this way, it is possible to apply 
the fcnown methods of queueing theory to analyze tne 
probabilistic properties of these nets which we call 
stochastic petri nets. We introduce in this section two 
sources of nonietermini sm which will be modeled by the 
stochastic petri nets — random transition firing times and 
the probabilistic firing of simultaneously enabled 
transitions. 

We first snow that if the firing time x for each 
transition is considered to be a random variable rather than 
a deterministic one, it is possible to analyze the tohen 
content of the net as a stochastic process. 
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Definition 3.3 Tne firing time is an independent, 

identically distributed, random variable such that 
Vti 6 T Kn is the firing time for the nth firing of 
transit! on t£ . 

The requirement that I[ is independent and identically 
distributed is necessary for our derivation of a Martov 
chain representation for tne net state space. In the case of 
computer networks, Kleinroct [40 J has investigated this 
requirement which he has named the message independence 
condition. This assumption is somewhat artificial in that it 
implies, for example, that the time required to process the 
same message at two nodes is independent. This difficulty 
notwithstandine, results for an analysis of the ARPA net 
show some evidence for the validity of this assumption [41 J . 
Applying the methods of probability theory, tne firing time 
distribution may be defined as: 

Definition 3.4 for all t^T, if X,; is the firing time for 

l i * 

S; (x) = P[X t *< x] 

In the usual way we define the density function: 

Definition 3.5 For all transitions ti $ T, tne firing time 
density function is given by 

s t * (x) = d/ix [S i(i )J = pU 4 * = x] 
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Likewise define tne moments: 



Definition 3.6 The nth moment of the firing time density 
function is given by: 



and in particular E[X.J = X t - = 1 /fx L is the mean firing 
(service) time*. 

These definitions mate it possible to model systems by 

applying the appropriate distributions to the firing time 

function. It is clear that the feasible firing sequences CT 

for a petri net are no longer deterministic. It is necessary 

to consider now this nondeterminism can occur in the net. 

Referring to Figure 3.1(a), it can be seen that transitions 

t 2 and t^. are both enabled. With random firing times, the 

sequences t 2 ,t^ and t^.t^ are both possible. In this 

instance the effect of the nondetermi nism is unimportant to 

overall system operation since the two processes are 

independent at this point. A more interesting situation is 

depicted in Figure 3.1(b). The transitions t^ , t^, and t+ 

are in conflict. To analyze this type of nondeterminism it 

is necessary to specify the branching probabilities for each 

of the possible paths. There are several possible ways this 

may be accomplished. For example, each simultaneously 

* The mean service rate j u. is an unfortunate conflict in 
notation. Due to its long standing use in the literature, we 
will use tnis notation pointing out its meaning wnere 
confusion might exist with the earlier definition of 
marking. 
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(a) 




(t>) 



Figure 3.1 Nondetermlnisrc in petri 
independent processes, (b) transitions 



nets . 
with 



(a ) 

conflict . 
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enabled transition may begin firing at once with tne 
transition which completes firing first causing the marking 
to change. Tne problem of determining vnicn transitions are 
simultaneously enabled is a significant one. We can simplify 
the problem by restricting our analysis to free choice 
places. 

Definition 3.7 A place p is free cnoice iff 



A free cnoice place is one which either has a unique output 
transition or is the only input place to each of its output 
transitions. This restriction ensures that a martcing for p 
will either enable all of its output transitions 
simultaneously, or will enable none of them. With this 
restriction, it is now possible to define tne branching 
probabilities for the output transitions of a free choice 
place. 

Definition 3.8 The branching probability for a free choice 
place p^ with p^* = {t , , t 2 , . . . , t n > is 
bij = P[tj will fire i t,,t 2 , ...,t • are enabled] 
such that: 



|Pi*| * 1 V\ftj£T €P( # — > -V - (P L > 



0 <b;j< 1 



and 
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Ve mate the assumption tnat these probabilities are 
functions of the firing distributions for tne output 
transitions only and in particular, that they are constant 
and independent of the marking. 

By allowing these sources of nondeterminism, the system 
state U may be expressed as a stochastic process. 

Definition 3.9 Let 0(*D, the system state of a petri net 
M, be a random variable and a function of time where 
U (*T) ~ [ Uj (f) * Ug (*T) , . . . , u ft (”T*) ] such that u^('t - ) = piy ( P£ ) • 
U( ) is a discrete state, continuous time stochastic 
process described by the probability distribution: 

f/t = p [n ( T", ) - fj, j t w ) = , . . . ,u(i^ ) = fj* n ] 

fJ. t *(Ji z t •• . 

U(T) describes the manner in which the system moves 
between states in the reachability set. It should be noted 
that the distribution f A (puT) is equivalent to expressing 
the probability that some feasible firing sequence <y exists 
such that pL 0 2>jLt . Therefore, it is possible to extend the 
definition of liveness. 

Definition 3.10 A transition t €T is live for state U 
iff 

Vu 3a; oj A p[a* ( ]>0 ==> 

3 cr z o Ptq]>0A^s, 
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Theorem 3.1 For a live stochastic petri net M with martini 
and initial marting ju. 0 €Q(m), 
p[U(T) *JULi] > 0 

Proof. Assume p[U(-T) -fJ-i J = 0. Then the probability that 
a firine sequence O" eiists such that is zero in 

contradiction with the assumptions of Definition 3.10 
and therefore M cannot be live. 

We are Interested in determining the conditions for which U 
is a Martov chain, that is, when 

I B(T„ ) -fd. n * ) - fd. n . 1 «... 

,0(%) =/J.J = p[0(r M ) =/X nW | U (T„) = jU.J. 

In addition, we are interested in determining the 
stationary (time independent) state probabilities if they 
exist. We first consider the case of state machine 
decomposable petri nets. 

C. CLOSED PETRI NET STSTEMS 

To express tne system state transitions as a Martov 
process it is first necessary to derive expressions for the 
arrival and departure processes for the places in the net. 
This may be accomplished by considering the net as a 
collection of nodes, each of which has a well-defined 
behavior, and in particular, for which the arrival and 
departure processes may be expressed analytically. 
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A node in a petrl net is defined as: 



Definition 3.11 a node n in a petri net is a subset of the 
set { P (J T > sucn tnat 
Vt; 6 T t; €n <==> 

Vpj p y€ *t i <==> pj £n 

A Vt K <==> t^^n 

Tneorem 3.2 Tne node set [nj = n ( , n a ,...,n„ is a 
partitioning? of a petri net M. 

* 

Proof, i.) yn t - = {P[JT}. By definition, every transition t 
is trivially an element of some node n K . Assume tnere 
exists a place pj sued tnat pj^ s (n ; , n 2 , ...,n m ). By toe 
definition of a petri net, p j nas (at least) one input 
transition t; . Since t£ is an element of some node, by 
Definition 3.11 p j is an element of that node, 
ii.) Vn a ,n t £ [nj n a = n 6 y n,. f) n fc =<p. Assume tnere 
exists some transition t,; £{n a f) n b } . Let Pj be an input 
place to 1 1 ‘ and an element of n a . Tnen by Definition 
3.11 py is also an element of n b . Now let t^ be an 
output transition to pj and an element of n a . Aeain by 
definition l K is also an element of n fc and tnerefore 
n a = n fe . 

Likewise, assume tnere exists some place 
Py 87 lbe same reasoning n^ = n^. Tnerefore, 

tne set of nodes defines a partitioning of M. QED. 
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Fleure 





(b) 



3.2 Queueing nodes In petri nets, (a) partitioning of an 
arbitrary net. (b) single place/transition node. 
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Figure 3.2(a) snows the node partitioning of an 
arbitrary petri net. Now consider the single 
place/transition node n ( . Figure 3.2(b) is tnis node witn an 
arbitrary marking. Since we Have assumed that the transition 
in this node is firing whenever enabled, we nave the 
important result that this node is equivalent to a single 
server queueing system. 

The meriting for p, which we have defined as the state 
element u, includes the tokens being fired or waiting to 
fire. Two features of tnis representation should be noted. 
First, all tokens are identical; no token classes exist. 
Second, no queueing discipline is modeled in the system. 
This places a restriction on the ability to derive analytic 
solutions for the system. 

To describe the operation of tne node, that is, 
determine the local state probabilities P[U(T) = uj , it is 
necessary to cnaracterize the arrival and departure 
processes. It is well known that the exponential 
distribution is the only continuous distribution for which 
the Markov property holds. In addition, it has been shown 
[33 j that arbitrary work conserving queueing disciplines 
result in equilibrium product form state probability 
solutions for exponential firings. Therefore we assume the 
firing time distribution S(i) to be: 
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Definition 3.12 The firing time distribution 



for 



transition t^ is given by 
SC (*) * 1 - exp(-fjjX ) 
where the mean firing rate isJJlc* 

The requirement that the queueing discipline be wort 
conserving means that no Knowledge of the firing time 
requirements is used in selecting tofcens for firing. It is 
clear from the indeterminate nature of the tokens in petri 
nets that this is indeed the case and therefore we are 
Justified in asserting that the Marfcov property holds. 

Finally, it is necessary to determine the arrival 
process for the node. In the case of closed networss (and 
the petri nets we have considered thus far), the arrivals 
are made up of departures from other nodes in the net. It is 
assumed that upon completion of firing, the tofcens 
immediately enter their associated output places. Therefore, 
the arrival process may be characterized as: 



Definition 3.13 Tne arrival rate Pc for a Place PC 
given by: 

n- -1 Fj ** 



where Py is the arrival rate for node n j , bjC is 
branching probability that a departure from node 
arrives at node ny, and m is the rant of [n] . 



is 



the 

n J 
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Note that we nave not specified tne arrival distribution 
Itself. It nas been snown by Burice's theorem [ 42 J and 
several extensions (for example [3J ) , tnat in many cases tne 
arrival process is asymptotically Poisson. 

To summarize, we nave made tne following assumptions 
concerning the petri net state transition process: 

1. Firing times are independent. 

2. Firing times are continuous and exponentially 

distributed. 

3. The queueing discipline is wort conserving. 

4. Nondeterministic transitions between nodes are 

determined by constant branching probabilities. 

5. There is no overhead in transition firings; 
transitions fire whenever enabled. 

In Section II we considered the class of state machine 
decomposable nets and state machines. Figure 3.3 is an 
example of such a net with its associated nodes. 

Theorem 3.3 Each node in a state machine contains exactly 
one place. 

Proof. By definition, eacn transition has a single input 
place. Trivially then, there must be at least one place 
in each node. Without loss of generality, assume tnere 
exists a node with two places p, and p ? with t t - £ p ( # . By 
implication, t; p a » and therefore in 
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contradiction witn tne definition of a node. Tnerefore, 
there is at most one place in each node. QED. 

Tne next result follows immediately: 

Corollary 3.3.1 The places in a state machine are 
free-choice . 

Since tne places are free-choice, it is possible to 
assign tne brancning probabilities to tne output 

transitions. These transitions are not multiple servers; 
rather, they represent the possibility for tokens vhicn must 
be handled differently. It is necessary therefore, to create 
composite places to deal with this requirement. The 

resulting net we call the stochastic equivalent petri net 
(SEN). 

Definition 3.14 The stochastic equivalent net for a petri 
net M is constructed as follows: 

For every place p in P, assign a set tlT ; ,TT 2 * • • ♦ »'/T n > 

where n = |p^#J , Vt*€T I ( Tlj ♦ t fe ) = Kp^.tj), and if 

Pi* = lt,,t^, ...,t n } 



In the associated graph, each edge from a transition in 
to the set {% ,1T Z , • • • > is Joined by an arc and labeled 

with tne appropriate brancning probability. 
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Figure 3.3 Partitioning of a petri net into a node set. 
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The SEN for the petri net in Figure 3.3 is depicted in 
Figure 3.4. Each node in tne SEN consists of a single place 
and transition , with the branching probabilities occurring 
at the output from the transitions. It is clear from the 

definition that the SEN has the same properties of 
boundedness, lireness, and consistency as the associated 
petri net. 

It is now possible to obtain the analytic solution for 
tne petri net by treating is as a closed queueing network. 

Theorem 3.4 The SEN for a state machine with a live 
marking is ergodic. 

Proof. By theorem 2.12, a state machine is bounded and 
therefore tne state space (reachahl llty set) is finite. 
Lien has shown [43, thm 1 1 J that the state space for 
this class is strongly connected. Therefore, the state 
space is irreducible. Since it is finite, tne 
probability of reaching some state, PlU^J, is greater 
than zero. Therefore tne state space is recurrent and 
non-null. By definition therefore, the state space is 
ergodic and likewise the SEN is ergodic. 

Thus, equilibrium state probabilities exist for the system; 
that is, 

P[UJ = 11m P[U,rJ 
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Figure 3.4 Stocnastlc equivalent net for tne petri net 

in Figure 3.3. 
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This type of system was solved by Gordon and Newell [30J . At 
equilibrium, tne derivative d/dT(P[U,Tj) must vanlsn for 
each state in the state space. This allows the Global 
balance equations for tne system to be written. For some 
state , the rate of change of probability is determined by 
the rate of flow of probability into the state due to 
arrivals and the rate of flow of probability from the state 
due to departures. This may be written as: 



d/df (P[0,-f)J = P[(u. ,u a , . . . ,u„ J ) “ 

it 



2 2 S(U£ )fJipLj ’PKu, ,u 2 , 

CM JM J 



CM JM 
* 0 



-“ j ” 1 u £ +1 



,uj] 



where §(u t ) is the u ait step function given by 
) = 



if u< = 0 



1 otherwise 

These equations may be solved directly to within a constant 
which may be determined by adding the requirement tnat 

2 P[0‘ J = 1 

CM U 

The product form solution to these equations is [30] 

p [□} = P[(u,,u z u h )j = u/edOin^ 

where £ = N(U) and the x* are solutions to equations 
=2 i ( i=l t2, . . . ,n ) . 

The normalization constant G(K) is given by 

ou) = 2 n x ? 

u «.*« 

Algorithms have been found for computing G(K) and the x • 

[«]. 
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D. OPEN PETRI NET SYSTEMS 

Since tne SEN for a state macnine has been snown to be 
equivalent to closed networks of queues, tne question arises 
as to wnetaer petri nets can be defined wnicn are analogous 
to open networxs. Sucn a system may model tne occurrence of 
external events such as tne arrival of interrupts. 
Alternatively, tne model may represent a communications 
system wnere messages enter and are removed from tne system 
at various points. To incorporate tnese external events, 
Definition 2.1 may be extended as follows: 

Definition 3.15 An open marXed petri net OM is a marked 

petri net wnere 

V T *t; = <p <=> t^ is a source 

t c* = <P <=> i s a sin* 

It is assumed tnat tnese transitions may source or sin* an 
infinite number of toxens. Tne firing rates are defined 
as before except tnat y i = (JL i is tne mean arrival rate for 
source . 

Tne possibility of external arrivals requires a 
modification of tne earlier arrival process definition. 

Definition 3.16 Tne arrival rate p* for a node is *iven by 

C;=y;+i r^j. 

j.i J 

It can be seen tnat Definition 3.13 is a special case 
wnere y =0 for i = i,2,...,n. 
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Several observations can be made concerning the ways In 



which the properties of liveness, boundedness, and 
consistency are affected by the addition of sources and 
sinXs. First, consider tne case of marxed graphs. Recall 
that for a marxed eraph, eacn place is conflict free. Figure 
3.5(a) shows part of a marxed graph. To meet the conflict 
free requirement, source and sinx transitions can be added 
to the net only at existing transitions (with intervening 
places being added). In Figure 3.5(b), a source transition 
stl has been added at transition and in Figure 3.5(c), a 
sinx transition st2 has been added at transition t^. 

Theorem 3.5 Liveness in marxed graphs is unaffected by tne 
addition of source or sinX transitions. 



Proof. By definition, a source transition is live, and 
therefore liveness is unaffected by the addition of a 
source. Now consider a transition in tne net t,; with a 
sinx transition/place pair added to the output. If t^ is 
live, it can be fired by some sequence which will then 
enable the sinx transition; therefore, tne sinx 
transition is live and llveness is conserved. 

Theorem 3.6 A marxed graph remains bounded after addition 
of source and sinX transitions except in the places 
associated with those transitions. 
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00 





Figure 3.5 Addition of source and sink transitions to petri nets, 
(a) marked graph. (b) marked graph with source stl. (c) marked 
grapn witn sink st2. (d) state macnine net with sources and sims. 




TMs result is clearly true by the definition of transition 
firing. It snould be noted tnat the general results of 
queuein* theory require that the places associated with the 
source and sink transitions be unbounded (if exponential 
arrivals and departures are assumed). 

In terms of the dynamic operation of marked graphs, it 
can be seen from Figure 3.5 tnat the existence of sink 
transitions has no effect. The source transitions operate by 
controlling the enabling of the net transitions to which 
they are connected? tney set an upper bound on the firing 
rate of the transition. 

In tne case of state macnines, the source and sink 
transitions are added to existing places in the net (see 
Figure 3.5(d)). Tne nondetermini sti c nature of state 
machines results in changes to the properties of the net 
after the addition of the sources and sinks. For example, if 
a sink transition is aided to a live state machine, tne net 
could eventually terminate since the sink must eventually 
become enabled resulting in tne loss of a token to the 
system. When sources are added, the net will become become 
unbounded. Since the source can be fired arbitrarily often, 
the token count of the output place to the source can become 
arbitrarily large. 

By generalizing the closed network queueing model 
developed in tne previous section, tne solution for state 
machines with sources and sinks may be obtained. Once again. 
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tae net is transformed into its stochastic equivalent. A 
sins is added to a node J by adjusting tne brancning 
probabilities of tne transitions in J so that the 
probability of departure from tne system at node J, P[d J, 
obeys: 

P[dJ * 1 - £ b.- t ’ where n is It^j. 

t*l * * 

A source is added to node j by inserting an edge directed 
into tne place in J and labeled with tne mean arrival rate. 

Since it is possible for the net to become unbounded 
after adding sources and sinfcs, it is necessary to require 
that f; < fJL j for every node in the SEN to ensure that the 
net remains ergodic. 

Once again, the solution involves writing tne global 
balance equations for the system, i.e.: 

Vu; Z p [&J (rate of flow from u £ int0 U J ) 

= P[Uy] (rate of flow out of Uj ) 

Basset [32 J has snown tnat tne general product form solution 
for this system is of tne form 

P[U] = Cd(U)f, (u,)f 2 (u 2 )...f 0 (u n ) 

where C is tne normalization constant needed to ensure 

t = 1 * 

d(0) is an expression for the exogenous arrival 

rate, 

n 

d(0) for Poisson arrivals at constant rate , y t ;, 
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and f£(u,;) is a function of tne 
For FCFS ♦ , f i (u t ) » 1/LL- ff f- 

JM J 



queue discipline. 




S. CONSISTENT PETRI NET SISTEMS 

Tne most general petri net class we consider is tnat of 
live, Pounded, and consistent nets. The solution to this 
class proceeds identically to tnat used earlier. Tne net is 
first transformed into its stochastic equivalent net form by 
tne method of Definition 3.13. Figure 3.6(a) snows how an 
arbitrary node in the petri net is transformed. Note tnat in 
the resulting node 12, two places are required as input to 
transition t^ and tnerefore tnis node does not model tne 
simple queue/server pair which was seen earlier for state 
macnines. Anotner possibility for a SEN node is tnat tne 
transition has multiple outputs with branching probabilities 
b{j all equal to 1. These two situations are shown in Figure 

3.6(b). It has been shown (44] that these types of nodes 
(also referred to as Join and forS nodes) do not satisfy 
local balance and therefore product form solutions do not 
exist for this class of nets. However, since the net is 
bounded, by tne results of Chapter II the reachability set 
(and state space) is finite and therefore the global state 
equations can be solved numerically [45J . 

In the case of consistent nets with sources and sinhs, 
it is possible for the net to become unbounded since the 
sources may fire arbitrarily often and therefore finding the 



87 



4 





Figure 3.5 Transformation of petri nets witn forts and 
Joins into SEN. (a) Arbitrary node transform. 

(b) Join and fort nodes. 
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solution to the global balance equations becomes 
intractable. In t&is case, approximation tecnniques sucn as 



aggregation or the diffusion 
resorted to. Tne applicabili 
nets is an open question, but 
extend the modeling power of 
systems . 



approximation [46] must be 
ty of tnese tecnniques to petri 
one which has the potential to 
petri nets to more interesting 
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IV. CONCLUSIONS 



Tnis tnesis nas addressed tne problem of computer system 
performance analysis through the use of tne petri net model. 
Tne model aas wide applicability to tne analysis of both 
hardware and software systems, particularly those which 
exhibit concurrency or asynchronous operation. Due to tne 
power of tne petri net approach, it is necessary to restrict 
the structure of the nets resulting in a hierarchical class 
relationship between petri net types. 

The classes of greatest interest in system modeling are 
marfced grapns, state macnines, and consistent nets. All 
three of these classes were shown to have the properties of 
boundedness, liveness, and consistency which are useful in 
the verification of computer system correctness. Of tne 
three classes, the class of consistent nets is the most 
useful in modeling in tnat it can represent the greatest 
range of possible systems — and is also the most difficult 
to analyze mathematically . 

It was seen that the general problem of reachability, 
and the set of states in which a marfced petri net could 
enter, was a primary consideration in the analysis of tne 
nets. In particular, an algorithm was presented for 
determining tne state space for tne class of bounded petri 

nets ♦ 
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By defining the firing times for the transitions in the 
net, it was possible to extend tne analysis of petri nets to 
their dynamic execution. Random firing times allowed tne 
nets to model lata dependent events. This concept led to the 
identification of nondetermini stn in tne petri net execution. 

Petri nets with random firing times were shown to be 
analogous to closed queueing networks. A major difficulty in 
this approach is the inability to model queueing disciplines 
in the places. However, if exponential firing is assumed, 
tne analysis can be conducted without detailed knowledge of 
the structure of tne queue. In this context, the stochastic 
equivalent net was introduced as a method for demonstrating 
the correspondence between petri nets and queueing networks. 
This permitted tne state probabilities to be determined 
through the known techniques of queueing theory. 

The definition of petri nets was extended to allow for 
events which take place external to tne system itself. 
Again, the resulting stochastic equivalent net corresponds 
to a queueing network — in this case tne open network 
model . 

It appears tnat tnis approach to petri net modeling can 
utilize more of the recent results of queueing network 
theory. For example, solutions have been found for state 
dependent routing (branching) probabilities, and state 
dependent arrival and departure rates. Additional work is 
required to determine if the use of petri net based 
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stocnastic models simplifies tne 
design criteria and parameters 
application of queueing network 



problem of reducing system 
to a form wnicn permits tne 
tecnniques . 
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APPENDIX A 





LIST OF NOTATION 




probability that transition j will fire siven 
tnat place i enables transitions t, 


C I 


input incidence matrix for a petri net 


Co 


output incidence matrix for a petri net 


E(t,| ♦ t j ) 


the set of edges in a marked graph between 
transitions i and j 


<$(t) 


a current assignment for a transition in a 
consistent net 


F(G,t) 


the firing function for a transition t and 
state 0 in a petri net 


ft 


the total mean arrival rate at node i 


I (p, t) 


the input function for place p and transition t 


M 


a marked petri net <P,T,I,0,jU> 


M' 


a marked graph <T ' ♦ E' ,juT> 


fl(p) 


the marking function for a marked petri net 
(section 2) 


M-i. 


the mean firing rate for transition i (sec 3) 


N 


a petri net <P,T,I,0> 


N (P ) 


the token count for a set of places P 


0(p, t) 


the output function for place p and transition t 


P 


the set of places in a petri net 


IT 


a composite place in a stochastic equivalent net 
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CL b 



the reachability set (space state) for 



Q(M) 

R(7) 



5 k 

S (x) 
s ( X ) 
T 

V 

¥ 



petri net M 

tne readability set for a vector addition 
system 7 

tne computation rate for a discrete time petri net 

a firing sequence ( t, , i zt . . . , t n ) 

tne enabling set { t, , t a , . . . ♦ t„ } enabled by 

marking 

the transition firing time distribution 
tne transition firing time density fuction 
the set of transitions in a petri net 
tne state of a petri net (u, ,u a# . . . ,u A ) with 
marking 

a vector addition system <d,W> 

the vector set in a vector addition system 
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